Business

profilepegz 67
Chapter9-Slides.pptx

Chapter 9 Network Management

Computer Networking: A Top Down Approach 6th edition Jim Kurose, Keith Ross Addison-Wesley March 2012

A note on the use of these ppt slides:

We’re making these slides freely available to all (faculty, students, readers). They’re in PowerPoint form so you see the animations; and can add, modify, and delete slides (including this one) and slide content to suit your needs. They obviously represent a lot of work on our part. In return for use, we only ask the following:

If you use these slides (e.g., in a class) that you mention their source (after all, we’d like people to use our book!)

If you post any slides on a www site, that you note that they are adapted from (or perhaps identical to) our slides, and note our copyright of this material.

Thanks and enjoy! JFK/KWR

All material copyright 1996-2012

J.F Kurose and K.W. Ross, All Rights Reserved

Network Management

9-1

Network Management

9-2

Chapter 9: Network Management

Chapter goals:

introduction to network management

motivation

major components

Internet network management framework

MIB: management information base

SMI: Structure of Management Information, data definition language

SNMP: protocol for network management

security and administration

2

Network Management

9-3

Chapter 9 outline

What is network management?

Internet-standard management framework

Structure of Management Information: SMI

Management Information Base: MIB

SNMP Protocol Operations and Transport Mappings

Security and Administration

3

Network Management

9-4

What is network management?

autonomous systems (aka “network”): 1000s of interacting hardware/software components

other complex systems requiring monitoring, control:

jet airplane

nuclear power plant

others?

"Network management includes the deployment, integration

and coordination of the hardware, software, and human

elements to monitor, test, poll, configure, analyze, evaluate,

and control the network and element resources to meet the

real-time, operational performance, and Quality of Service

requirements at a reasonable cost."

4

Network Management

9-5

Infrastructure for network management

managed device

managed device

managed device

managed device

definitions:

managed devices contain

managed objects whose

data is gathered into a

Management Information

Base (MIB)

managing

entity

data

managing entity

agent

data

agent

data

agent

data

agent

data

network

management

protocol

managed device

agent

data

5

Network Management

9-6

Network management standards

OSI CMIP

Common Management Information Protocol

designed 1980’s: the unifying net management standard

too slowly standardized

SNMP: Simple Network Management Protocol

Internet roots (SGMP)

deployed, adopted rapidly

growth: size, complexity

currently: SNMP V3

de facto network management standard

6

Network Management

9-7

What is network management?

Internet-standard management framework

Structure of Management Information: SMI

Management Information Base: MIB

SNMP Protocol Operations and Transport Mappings

Security and Administration

Chapter 9 outline

7

Network Management

9-8

SNMP overview: 4 key parts

Management information base (MIB):

distributed information store of network management data

Structure of Management Information (SMI):

data definition language for MIB objects

SNMP protocol

convey manager<->managed object info, commands

security, administration capabilities

major addition in SNMPv3

8

Network Management

9-9

SNMP naming

question: how to name every possible standard object (protocol, data, more..) in every possible network standard??

answer: ISO Object Identifier tree:

hierarchical naming of all objects

each branch point has name, number

1.3.6.1.2.1.7.1

ISO

ISO-ident. Org.

US DoD

Internet

udpInDatagrams

UDP

MIB2

management

9

Network Management

9-10

OSI Object Identifier Tree

10

Network Management

9-11

SNMP protocol

Two ways to convey MIB info, commands:

agent

data

managed device

managing

entity

agent

data

managed device

managing

entity

trap msg

request

request/response mode

trap mode

response

11

Network Management

9-12

SNMP security and administration

encryption: DES-encrypt SNMP message

authentication: compute, send MIC(m,k): compute hash (MIC) over message (m), secret shared key (k)

protection against playback: use nonce

view-based access control:

SNMP entity maintains database of access rights, policies for various users

database itself accessible as managed object!

12

Network Management

9-13

Network management: summary

network management

extremely important: 80% of network “cost”

SNMP protocol as a tool for conveying information

network management: more art than science

what to measure/monitor

how to respond to failures?

alarm correlation/filtering?

13